Forum Discussion

dp_119903's avatar
dp_119903
Icon for Cirrostratus rankCirrostratus
Oct 08, 2014

Really basic redirect question

I feel foolish for not knowing this but I have a really basic redirect question.   I have a server (maintained by a different team) that is listening for SSL connections on 7004 for a specific URI...
application delivery
deployment
LTM
shaggy's avatar
shaggy
Icon for Nimbostratus rankNimbostratus

Can you post the configuration for this virtual server and the iRule that you're using? Via CLI - 

tmsh list ltm virtual (vs-name)

You are correct - server-ssl profiles re-encrypt traffic to the pool member, and client-ssl profiles terminate SSL connections from the user at the F5. If you are receiving a 404 response, it appears as if IP/TCP traffic is properly flowing to/from the server and that SSL handshakes are occurring, the server just doesn't have the URL being requested. If traffic wasn't flowing or handshakes weren't occurring, you would see timeouts or TCP resets, assuming the iRule isn't configured to respond with a 404.

Testing via curl may also help - 

curl https://(vs-ip):(vs-port)/(url) -vv

dp_119903's avatar
dp_119903
Icon for Cirrostratus rankCirrostratus
Oct 08, 2014
I went ahead and deleted the app and added it manually so that I could display it here: ltm virtual MyToken_RSA_http { destination 10.5.135.223:http ip-protocol tcp mask 255.255.255.255 profiles { http { } tcp { } } rules { _sys_https_redirect } vlans-disabled } ltm virtual MyToken_RSA_https { destination 10.1.1.223:https ip-protocol tcp mask 255.255.255.255 persist { cookie { default yes } } pool MyToken_RSA_pool profiles { clientssl { context clientside } http { } serverssl { context serverside } tcp { } } rules { MyToken } vlans-disabled }